sk-facebook[.]blogspot[.]com

Analysis indicates that the domain sk-facebook.blogspot.com is currently active and resolves to the IPv4 address 142.251.13.132. The domain has been classified as a generic_phishing infrastructure and is listed with a risk level of under_investigation. The domain remains active according to the latest intelligence and has not been taken down. VirusTotal records show that the host was examined by 95 scanning engines, none of which reported a detection at the time of analysis; this absence does not constitute evidence of benign intent. No public page title, brand targeting, or phishing kit details have been disclosed, leaving the exact lure and credential‑harvesting methodology unknown. The lack of visible content or additional indicators hampers precise attribution, but the presence of a dedicated sub‑domain under the Blogger platform suggests an attempt to exploit the perceived legitimacy of a well‑known hosting service. Defenders should consider adding the domain to block lists, monitoring DNS queries for the associated IP, and employing sink‑hole or passive DNS techniques to track any future resolution changes. Continuous re‑evaluation is advised, as the threat actor may modify the payload or redirect traffic to a different endpoint.